/
DirectorySecurity Advisories
Sign In
Security Advisories

CVE-2018-1000632

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2018-1000632

CGA ID

CGA-q376-c737-6hc9

Severity

Unknown

Description

dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specifying attributes or elements in the XML document. This vulnerability appears to have been fixed in 2.1.1 or later.

References

Affected packages


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2025 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Products

Chainguard ContainersChainguard LibrariesChainguard VMs